CVE-2020-10617
CVE-2020-10617
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Apr 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.
Affected products
n/a · WebAccess/NMSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →